chore(deps): update ghcr.io/dexidp/dex docker tag to v2.45.1

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
ghcr.io/dexidp/dex	minor	v2.37.0 → v2.45.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dexidp/dex (ghcr.io/dexidp/dex)

v2.45.1

Compare Source

Bug Fixes 🐛

• Quote groups reserved word in query replacer to fix MySQL 8.0+ storage migration (#​4580)
• Update authproxy and oauth to match CallbackConnector interface (#​4589)

Full Changelog: dexidp/dex@v2.45.0...v2.45.1

v2.45.0

Compare Source

Know Before Upgrade

• The major version of gomplate has been bumped to v5.0.0, which includes breaking changes. Here is the full list.
• There are two known CVEs in the gomplate binary - CVE-2025-68121 and CVE-2026-25934. gomplate is only used for preprocessing configuration files and is optional. Once the CVEs are fixed upstream, the version of gomplate in the dex image will be updated accordingly.
• The ContinueOnConnectorFailure feature flag is now enabled by default. To disable it, use the following environment variable: DEX_CONTINUE_ON_CONNECTOR_FAILURE=false.
• Pre-release versions of dex now use pseudo-versioning for identifying releases. Unreleased versions will follow the pattern v2.minor+1.0-yyyymmdd-commithash.

What's Changed

Exciting New Features 🎉

• Add support to PKCE in OIDC connector by @​johnvan7 in #​3777
• Add Vault signer for JWT by @​nabokihms in #​4512
• Support groups and preferred_username for static passwords by @​Jabejixo in #​4456
• Add name and email_verified fields for static passwords by @​Jabejixo in #​4526

Enhancements 🚀

• Example app pkce by @​nabokihms in #​4284
• Only wrap IPv6 addresses in brackets by @​rene-dekker in #​4388
• Update distroless base image to debian13 by @​loosebazooka in #​4453
• Hide internal server error details from users by @​Jabejixo in #​4457
• Gitlab support custom rootCAData by @​Jabejixo in #​4496
• Enable ContinueOnConnectorFailure feature flag by @​manojVivek in #​4495
• Extend example configs for idEnv and public by @​cardoe in #​4443
• Add unprivileged user setup in Dockerfile by @​nabokihms in #​4517
• Add conformance tests for Vault signer integration by @​nabokihms in #​4520
• Add CRD handling behavior and configuration options by @​nabokihms in #​4543
• Enhance git-version script to generate pseudo-versions by @​nabokihms in #​4553
• Validate redirect URIs and safely append parameters by @​nabokihms in #​4559
• Refactor example-app with a new config by @​nabokihms in #​4569
• Implement device code flow in example-app by @​nabokihms in #​4570

Bug Fixes 🐛

• Do not wrap Kubernetes Address in brackets by @​nabokihms in #​4363
• Device callback URL needs to handle a / by @​cardoe in #​4448
• Suppress deprecation warning for userAttr when not set by @​nabokihms in #​4539
• Use correct id value for label by @​loganripplinger in #​4541
• Respond with forbidden if failed to authenticate by @​aljoshare in #​4200

Dependency Updates ⬆️

• build(deps): bump github.com/dexidp/dex/api/v2 from 2.3.0 to 2.4.0 in /examples by @​dependabot[bot] in #​4299
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @​dependabot[bot] in #​4304
• build(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 by @​dependabot[bot] in #​4305
• build(deps): bump golang from 1.25.0-alpine3.22 to 1.25.1-alpine3.22 by @​dependabot[bot] in #​4307
• build(deps): bump distroless/static-debian12 from a9f88e0 to e8a4044 by @​dependabot[bot] in #​4313
• build(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4 by @​dependabot[bot] in #​4314
• build(deps): bump github/codeql-action from 3.29.11 to 3.30.3 by @​dependabot[bot] in #​4320
• build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @​dependabot[bot] in #​4324
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @​dependabot[bot] in #​4302
• build(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 by @​dependabot[bot] in #​4309
• build(deps): bump tonistiigi/xx from 1.6.1 to 1.7.0 by @​dependabot[bot] in #​4317
• build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 by @​dependabot[bot] in #​4310
• build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 in /examples by @​dependabot[bot] in #​4311
• build(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by @​dependabot[bot] in #​4339
• build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by @​dependabot[bot] in #​4335
• build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @​dependabot[bot] in #​4334
• build(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 by @​dependabot[bot] in #​4332
• build(deps): bump golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22 by @​dependabot[bot] in #​4368
• build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1 by @​dependabot[bot] in #​4366
• build(deps): bump github/codeql-action from 3.30.4 to 4.30.8 by @​dependabot[bot] in #​4365
• build(deps): bump google.golang.org/api from 0.248.0 to 0.252.0 by @​dependabot[bot] in #​4360
• build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /examples by @​dependabot[bot] in #​4357
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​4350
• build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @​dependabot[bot] in #​4348
• build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @​dependabot[bot] in #​4338
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4333
• build(deps): bump alpine from 3.22.1 to 3.22.2 by @​dependabot[bot] in #​4361
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 in /examples by @​dependabot[bot] in #​4354
• build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 by @​dependabot[bot] in #​4355
• build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /examples by @​dependabot[bot] in #​4362
• build(deps): bump github/codeql-action from 4.30.8 to 4.31.2 by @​dependabot[bot] in #​4398
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in #​4395
• build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9 by @​dependabot[bot] in #​4393
• build(deps): bump tonistiigi/xx from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​4386
• build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​4376
• build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /api/v2 by @​dependabot[bot] in #​4356
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @​dependabot[bot] in #​4380
• build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 by @​dependabot[bot] in #​4374
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 by @​dependabot[bot] in #​4373
• build(deps): bump golang from 20ee0b6 to aee43c3 by @​dependabot[bot] in #​4371
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /examples by @​dependabot[bot] in #​4300
• build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​4375
• build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 in /api/v2 by @​dependabot[bot] in #​4352
• build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0 by @​dependabot[bot] in #​4430
• build(deps): bump distroless/static-debian12 from e8a4044 to 2b7c93f by @​dependabot[bot] in #​4427
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @​dependabot[bot] in #​4419
• build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @​dependabot[bot] in #​4414
• build(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2 by @​dependabot[bot] in #​4411
• build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​4405
• build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 by @​dependabot[bot] in #​4402
• build(deps): bump helm/kind-action from 1.12.0 to 1.13.0 by @​dependabot[bot] in #​4399
• build(deps): bump alpine from 3.22.2 to 3.23.0 by @​dependabot[bot] in #​4425
• build(deps): bump golang from 1.25.3-alpine3.22 to 1.25.5-alpine3.22 by @​dependabot[bot] in #​4424
• build(deps): bump google.golang.org/api from 0.252.0 to 0.256.0 by @​dependabot[bot] in #​4413
• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​4409
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @​dependabot[bot] in #​4412
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.11 to 3.4.12 by @​dependabot[bot] in #​4401
• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 in /examples by @​dependabot[bot] in #​4431
• build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /examples by @​dependabot[bot] in #​4417
• build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /api/v2 by @​dependabot[bot] in #​4416
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in /examples by @​dependabot[bot] in #​4426
• build(deps): bump alpine from 3.23.0 to 3.23.2 by @​dependabot[bot] in #​4455
• build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /examples by @​dependabot[bot] in #​4460
• build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @​dependabot[bot] in #​4449
• build(deps): bump github/codeql-action from 4.31.3 to 4.31.7 by @​dependabot[bot] in #​4440
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @​dependabot[bot] in #​4439
• build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by @​dependabot[bot] in #​4438
• build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @​dependabot[bot] in #​4437
• build(deps): bump anchore/sbom-action from 0.20.9 to 0.20.11 by @​dependabot[bot] in #​4435
• build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0 by @​dependabot[bot] in #​4434
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​4433
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.17.0 by @​dependabot[bot] in #​4441
• build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /api/v2 by @​dependabot[bot] in #​4450
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 in /examples by @​dependabot[bot] in #​4420
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4436
• build(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 by @​dependabot[bot] in #​4481
• build(deps): bump distroless/static-debian13 from b5b9fd0 to f9f84bd by @​dependabot[bot] in #​4468
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​4476
• build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @​dependabot[bot] in #​4472
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 by @​dependabot[bot] in #​4474
• build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @​dependabot[bot] in #​4475
• build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @​dependabot[bot] in #​4469
• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​4477
• build(deps): bump actions/cache from 4.3.0 to 5.0.1 by @​dependabot[bot] in #​4473
• build(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by @​dependabot[bot] in #​4470
• build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in #​4471
• build(deps): bump google.golang.org/api from 0.257.0 to 0.259.0 by @​dependabot[bot] in #​4478
• build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /api/v2 by @​dependabot[bot] in #​4459
• build(deps): bump actions/cache from 5.0.1 to 5.0.2 by @​dependabot[bot] in #​4484
• build(deps): bump golang from d9c983d to ad295fc by @​dependabot[bot] in #​4493
• build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @​dependabot[bot] in #​4485
• build(deps): bump anchore/sbom-action from 0.20.11 to 0.22.0 by @​dependabot[bot] in #​4487
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​4489
• build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @​dependabot[bot] in #​4492
• build(deps): bump google.golang.org/api from 0.260.0 to 0.263.0 by @​dependabot[bot] in #​4494
• build(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 by @​dependabot[bot] in #​4505
• build(deps): bump actions/cache from 5.0.2 to 5.0.3 by @​dependabot[bot] in #​4504
• build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @​dependabot[bot] in #​4502
• build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in #​4501
• build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 by @​dependabot[bot] in #​4499
• build(deps): bump alpine from 3.23.2 to 3.23.3 by @​dependabot[bot] in #​4498
• build(deps): bump google.golang.org/api from 0.263.0 to 0.265.0 by @​dependabot[bot] in #​4508
• build(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​4503
• build(deps): bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 by @​dependabot[bot] in #​4514
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @​dependabot[bot] in #​4515
• build(deps): bump github/codeql-action from 4.32.0 to 4.32.2 by @​dependabot[bot] in #​4509
• build(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 by @​dependabot[bot] in #​4510
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in /examples by @​dependabot[bot] in #​4516
• build(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by @​dependabot[bot] in #​4518
• build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 by @​dependabot[bot] in #​4519
• build(deps): bump google.golang.org/api from 0.265.0 to 0.266.0 by @​dependabot[bot] in #​4523
• build(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 by @​dependabot[bot] in #​4530
• build(deps): bump golang from 1.25.7-alpine3.22 to 1.26.0-alpine3.22 by @​dependabot[bot] in #​4522
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.33 to 1.14.34 by @​dependabot[bot] in #​4524
• build(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 by @​dependabot[bot] in #​4525
• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 in /examples by @​dependabot[bot] in #​4537
• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 by @​dependabot[bot] in #​4534
• build(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 by @​dependabot[bot] in #​4535
• build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 by @​dependabot[bot] in #​4533
• build(deps): bump distroless/static-debian13 from f9f84bd to 01e550f by @​dependabot[bot] in #​4546
• build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 in /examples by @​dependabot[bot] in #​4551
• build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 by @​dependabot[bot] in #​4549
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4548
• build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 by @​dependabot[bot] in #​4547
• build(deps): update gRPC to v1.79.1 and other dependencies by @​nabokihms in #​4554
• build(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by @​dependabot[bot] in #​4557
• build(deps): bump google.golang.org/api from 0.266.0 to 0.267.0 by @​dependabot[bot] in #​4558
• build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @​dependabot[bot] in #​4562
• build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @​dependabot[bot] in #​4563
• build(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by @​dependabot[bot] in #​4574
• build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by @​dependabot[bot] in #​4573

Other Changes

• Add Terrakube to Adopters by @​shurup in #​4316

New Contributors

• @​Zash made their first contribution in #​4327
• @​rene-dekker made their first contribution in #​4388
• @​loosebazooka made their first contribution in #​4453
• @​Jabejixo made their first contribution in #​4456
• @​loganripplinger made their first contribution in #​4541
• @​johnvan7 made their first contribution in #​3777
• @​aljoshare made their first contribution in #​4200

Full Changelog: dexidp/dex@v2.44.0...v2.45.0

v2.44.0

Compare Source

What's Changed

Enhancements 🚀

• Allow server startup with partial connector failures by @​manojVivek in #​4159
• Add recursive LDAP parent group search (AD-style hierarchy across all LDAPs) by @​EthanDieterich in #​4113
• feat: Add ModifyGroupNames claimMutation to oidc connector by @​peschmae in #​4144
• authproxy connector: add support for specifying group header separator by @​a-buck in #​3745
• fix: join issuer URL with discovery path without extra slash after issuer URL by @​vizv in #​4263
• feat: grpc api list clients by @​daemonfire300 in #​4202

Bug Fixes 🐛

• 🐛 remove extra method="get" from device-code template by @​tuminoid in #​4145
• [oidc] pass httpClient to the TokenIdentity context by @​marriva in #​4223
• Resolve CVE by updating gomplate to 4.3.3 by @​philBrown in #​4224
• fix: device code should not require scope by @​cardoe in #​4203
• fix: device code pending HTTP response by @​cardoe in #​4204
• Allow compilation without CGO by @​nabokihms in #​4266

Dependency Updates ⬆️

• Resolve CVE by updating gomplate to 4.3.2 by @​nathanlaceyraft in #​4146
• build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​4180
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​4171
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /examples by @​dependabot[bot] in #​4174
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by @​dependabot[bot] in #​4179
• build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @​dependabot[bot] in #​4167
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​4162
• build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by @​dependabot[bot] in #​4155
• build(deps): bump distroless/static-debian12 from 188ddfb to 627d6c5 by @​dependabot[bot] in #​4181
• build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot[bot] in #​4187
• build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 by @​dependabot[bot] in #​4186
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 by @​dependabot[bot] in #​4185
• build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by @​dependabot[bot] in #​4184
• build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @​dependabot[bot] in #​4183
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4175
• build(deps): bump alpine from 3.21.3 to 3.22.0 by @​dependabot[bot] in #​4163
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2 by @​dependabot[bot] in #​4170
• build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 by @​dependabot[bot] in #​4189
• build(deps): bump mheap/github-action-required-labels from 5.5.0 to 5.5.1 by @​dependabot[bot] in #​4190
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 in /examples by @​dependabot[bot] in #​4219
• build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @​dependabot[bot] in #​4205
• build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.2 by @​dependabot[bot] in #​4225
• build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​4210
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​4196
• build(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​4214
• build(deps): bump alpine from 3.22.0 to 3.22.1 by @​dependabot[bot] in #​4217
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4213
• build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 by @​dependabot[bot] in #​4199
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.29 by @​dependabot[bot] in #​4239
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.4 by @​dependabot[bot] in #​4238
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​4235
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4233
• build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 in /examples by @​dependabot[bot] in #​4232
• build(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @​dependabot[bot] in #​4229
• build(deps): bump google.golang.org/api from 0.238.0 to 0.243.0 by @​dependabot[bot] in #​4234
• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​4227
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 in /examples by @​dependabot[bot] in #​4246
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4243
• build(deps): bump distroless/static-debian12 from 627d6c5 to cdf4daa by @​dependabot[bot] in #​4253
• build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 by @​dependabot[bot] in #​4252
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.29 to 1.14.30 by @​dependabot[bot] in #​4249
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​4244
• build(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 by @​dependabot[bot] in #​4247
• build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​4254
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​4255
• build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @​dependabot[bot] in #​4257
• build(deps): bump google.golang.org/api from 0.244.0 to 0.246.0 by @​dependabot[bot] in #​4258
• build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 by @​dependabot[bot] in #​4272
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.30 to 1.14.32 by @​dependabot[bot] in #​4271
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.9 by @​dependabot[bot] in #​4269
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​4267
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​4262
• build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] in #​4261
• build(deps): bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0 by @​dependabot[bot] in #​4259
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​4275
• build(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 by @​dependabot[bot] in #​4274
• chore: update ent generated code by @​sagikazarmark in #​4276
• feat: update Go to 1.25 by @​sagikazarmark in #​4277
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 in /api/v2 by @​dependabot[bot] in #​4236
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in /api/v2 by @​dependabot[bot] in #​4260
• build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by @​dependabot[bot] in #​4278
• build(deps): bump distroless/static-debian12 from cdf4daa to a9f88e0 by @​dependabot[bot] in #​4291
• build(deps): bump github.com/beevik/etree from 1.5.1 to 1.6.0 by @​dependabot[bot] in #​4288
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​dependabot[bot] in #​4287
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /examples by @​dependabot[bot] in #​4282
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @​dependabot[bot] in #​4281
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /api/v2 by @​dependabot[bot] in #​4280
• build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 by @​dependabot[bot] in #​4283
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @​dependabot[bot] in #​4285
• build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by @​dependabot[bot] in #​4290
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /api/v2 by @​dependabot[bot] in #​4286
• build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @​dependabot[bot] in #​4296
• build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​4293
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​4292

New Contributors

• @​nathanlaceyraft made their first contribution in #​4146
• @​manojVivek made their first contribution in #​4159
• @​marriva made their first contribution in #​4223
• @​peschmae made their first contribution in #​4144
• @​philBrown made their first contribution in #​4224
• @​a-buck made their first contribution in #​3745
• @​vizv made their first contribution in #​4263
• @​daemonfire300 made their first contribution in #​4202

Full Changelog: dexidp/dex@v2.43.0...v2.44.0

v2.43.1

Compare Source

What's Changed

Dependency Updates ⬆️

• Backport #​4146 to 2.43.x by @​sagikazarmark in #​4148

Full Changelog: dexidp/dex@v2.43.0...v2.43.1

v2.43.0

Compare Source

What's Changed

Enhancements 🚀

• Generate access tokens for implicit & hybrid flows only when needed by @​mfila in #​3857
• k8s storage: Request only one object to check if API exists by @​nabokihms in #​4027
• refactor: simplify tests by using slog.DiscardHandler by @​alexandear in #​4058

Bug Fixes 🐛

• Fix Makefile to Support Spaces in Paths by @​EthanDieterich in #​4000
• fix: remove version controlled files from dockerignore by @​sagikazarmark in #​4087
• fix Incorrect Group Handling in RequestContextHandler logger.go by @​alihasan070707 in #​4082

Dependency Updates ⬆️

• build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @​dependabot in #​3998
• build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @​dependabot in #​3997
• build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by @​dependabot in #​3996
• build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @​dependabot in #​3995
• build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by @​dependabot in #​3994
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @​dependabot in #​4008
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go_modules group by @​dependabot in #​4007
• build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by @​dependabot in #​4021
• build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by [@​dependab

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.